This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e39362e302f32302d3234203d3e203533303438.roa
File:                     3138372e37332e39362e302f32302d3234203d3e203533303438.roa (raw, json)
Hash identifier:          mUieqeJdxR4tWDtSXb9czyw88olGSwxh8CnFwdCV008=
Subject key identifier:   40:EE:57:00:D3:9D:16:49:03:FB:CD:B4:7A:24:89:12:49:9A:EF:3D
Certificate issuer:       /CN=A910E04F27510FFF1E8362052070412C903FFD8B
Certificate serial:       2D78F7BFD36902345CCAC5E3F5EF425C54AC2F57
Authority key identifier: A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e39362e302f32302d3234203d3e203533303438.roa
Signing time:             Fri 02 Jan 2026 13:00:48 +0000
ROA not before:           Fri 02 Jan 2026 12:55:48 +0000
ROA not after:            Fri 01 Jan 2027 13:00:48 +0000
asID:                     53048
IP address blocks:        187.73.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl
                          rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 19:05:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:78:f7:bf:d3:69:02:34:5c:ca:c5:e3:f5:ef:42:5c:54:ac:2f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A910E04F27510FFF1E8362052070412C903FFD8B
        Validity
            Not Before: Jan  2 12:55:48 2026 GMT
            Not After : Jan  1 13:00:48 2027 GMT
        Subject: CN=40EE5700D39D164903FBCDB47A248912499AEF3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b6:62:a1:b1:3c:f8:e7:c0:94:18:59:cc:3e:
                    b8:08:62:ca:97:b2:e8:5a:64:51:fd:64:ab:1a:46:
                    02:38:c3:18:e7:5b:45:2c:8b:63:57:76:f9:ea:3d:
                    ef:87:fe:46:40:a1:86:c4:e9:0e:f4:62:40:aa:2f:
                    42:17:92:ba:82:ec:8d:c6:9c:5f:c1:a7:24:ff:ff:
                    0a:dc:39:2f:1f:4f:3d:4a:c3:33:b2:8b:c2:49:69:
                    88:78:e7:b1:94:53:0c:59:33:e7:dc:c6:91:f9:3c:
                    3b:77:38:b7:23:1b:21:9c:92:a0:fc:11:92:39:b5:
                    32:ec:0f:58:03:b3:e7:b6:d6:b0:84:5d:93:0c:66:
                    f4:82:30:bc:2f:e8:64:f5:e5:73:26:52:c5:f0:3c:
                    3c:47:28:e6:d0:b3:22:e4:39:ef:98:9f:66:e6:62:
                    1f:75:f4:79:5e:8a:c9:cb:57:99:34:f4:80:0e:cd:
                    8f:67:70:64:0e:3d:b2:08:48:99:2f:d4:cf:7f:b3:
                    64:87:43:ab:73:2c:45:7d:b2:ca:84:07:c1:eb:4a:
                    1d:12:0a:1a:03:81:6f:d6:ba:95:e4:97:7f:a3:4d:
                    99:e1:35:dd:e8:b4:b0:d7:6c:4e:60:ca:6d:62:d0:
                    6b:c9:53:50:22:35:e0:6b:52:62:53:a6:ea:a2:93:
                    30:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EE:57:00:D3:9D:16:49:03:FB:CD:B4:7A:24:89:12:49:9A:EF:3D
            X509v3 Authority Key Identifier:
                keyid:A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e39362e302f32302d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6f:0a:56:c6:c2:d6:90:1c:48:bb:ce:b8:20:ff:e8:92:5d:bb:
         33:52:da:15:4c:94:31:08:45:7d:70:df:97:9d:db:80:ac:79:
         1a:fb:8a:37:10:33:11:96:42:83:9a:83:cc:d3:88:84:03:2e:
         6b:08:e7:4f:07:01:26:45:e5:a5:2c:c5:60:23:db:c2:78:3c:
         98:ea:8d:a6:64:68:7a:ad:83:f8:e0:e5:f8:52:3c:7d:87:01:
         ff:68:ca:27:f6:44:ce:f5:ba:6f:08:a7:ab:81:a4:ce:f2:e5:
         6b:4f:a1:f4:23:34:28:f0:3c:3b:a1:3b:26:9f:d4:69:1f:71:
         ea:9d:62:d5:48:54:80:35:fd:e4:cd:d5:7c:73:77:ab:a8:d2:
         91:82:11:9a:8b:e5:de:3d:07:90:35:50:c5:33:3b:b7:34:8d:
         72:bb:df:ff:ff:df:d5:98:c7:f9:db:76:0e:31:90:ad:4e:ad:
         29:a6:76:af:9b:1d:6d:3a:fa:e1:bc:97:b4:d7:85:77:9a:5d:
         d4:74:45:7f:af:ea:1c:45:ea:a2:3e:ae:10:ca:db:2e:78:8f:
         15:af:f4:66:4e:6e:b8:19:ed:c6:5a:08:92:92:23:9d:5f:18:
         46:8c:62:04:88:be:ca:ee:02:c3:92:44:a8:ff:18:02:39:bd:
         45:1c:31:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:55:14 2026 by rpki-client